
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json)
Hash identifier: rHQtSPqCmxWp4R/P/SiPrcGDZ/2CORVMOygTKwFPMuA=
Subject key identifier: 64:7F:F4:D4:32:B8:9E:36:43:C9:D3:EA:AE:A7:50:22:61:85:CF:3C
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
Manifest number: 7D
Signing time: Tue 12 May 2026 23:31:42 +0000
Manifest this update: Tue 12 May 2026 23:31:41 +0000
Manifest next update: Tue 19 May 2026 23:31:41 +0000
Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: yNHcnzu+j4ms4ePjoOjcBOS9MK8NlHkSyEpBuaDHQ+8=)
2: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=)
3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=)
4: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=)
5: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=)
6: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Validity
Not Before: May 12 23:31:41 2026 GMT
Not After : May 19 23:31:41 2026 GMT
Subject: CN=6a03b85e-91e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:21:8c:69:3d:6c:44:b5:7f:45:0b:af:40:
f9:73:b1:8f:57:89:ee:83:ef:5f:87:39:c3:42:bb:
95:87:fe:95:51:5a:87:b2:da:57:60:2f:69:48:16:
9a:20:c7:e8:c1:3e:1b:d2:0a:f9:fa:5f:3a:08:06:
39:03:bb:f3:cb:76:3a:b6:d7:26:c3:5d:d1:6a:d7:
51:78:fd:ba:35:94:7f:fd:e6:14:df:12:91:ce:e7:
ea:b9:91:2b:61:38:8e:22:dd:3a:f2:fe:5d:46:04:
53:71:94:9d:bc:e4:b8:31:f1:a5:df:10:25:ae:d0:
1a:36:69:1e:4d:ac:56:2a:fa:da:45:5c:fa:ce:d7:
df:82:ed:96:37:50:a6:09:97:52:99:41:df:ef:98:
0b:12:54:42:ca:74:fb:17:c1:c1:b1:dd:74:0b:d0:
91:d0:14:41:5f:61:bc:cd:ab:65:d4:cb:85:93:4a:
e7:7f:fe:ec:5f:b0:5b:0a:3e:dc:2b:8e:32:72:07:
fb:c2:e5:1e:bc:5c:f3:5b:03:99:d0:71:4a:d3:cc:
79:c5:a6:76:33:55:b4:44:7a:34:3a:94:41:e4:3a:
cc:aa:b6:ac:f3:23:a8:78:df:f5:30:98:82:01:9a:
3d:ba:6c:f1:4c:30:cf:66:97:95:ea:4a:9e:01:85:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:F4:D4:32:B8:9E:36:43:C9:D3:EA:AE:A7:50:22:61:85:CF:3C
X509v3 Authority Key Identifier:
keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:63:9b:af:38:4a:13:24:5d:bc:97:15:e5:f7:83:13:9b:
86:f5:67:41:04:3a:9b:bf:11:20:b5:00:8a:02:20:a7:a9:39:
cc:7a:4d:4e:77:5a:04:1f:9f:21:1f:62:ab:78:99:3b:1d:ef:
8a:50:c8:89:39:94:ce:f8:d5:73:da:c7:0d:50:1d:be:a2:e4:
12:af:f4:37:7b:5c:66:cc:44:40:29:83:b1:e1:ce:bd:16:63:
ad:33:b0:a8:74:e3:42:88:0d:43:b1:79:86:e4:c7:36:31:7c:
c9:cf:7e:1b:48:61:73:92:0a:08:4b:a2:e3:0b:52:1c:f6:2a:
8c:23:ed:57:de:1e:9f:50:0e:78:d9:45:39:34:4e:40:24:e0:
93:57:40:95:a1:95:6f:dd:04:af:3e:a4:3c:69:ad:ab:c1:12:
ba:58:66:76:cb:0e:d3:47:ae:20:c8:c9:69:3b:2f:69:61:37:
de:29:89:1b:1b:d0:df:f9:f0:d9:a8:ef:54:ff:62:4e:e3:76:
01:62:2e:fc:11:8b:8f:11:90:ec:13:5e:b8:0f:d2:83:d7:f8:
0f:b7:20:58:5b:17:53:3c:6a:7f:93:1d:4f:06:be:5e:1d:bf:
a6:e9:db:2d:26:b6:6e:fe:09:bb:ba:3b:b4:04:b5:b3:fe:56:
3e:d5:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:14 2026 by rpki-client